Legal
Short, because you should read it.
Plain summaries first. Last updated 4 August 2026.
Terms
We give you a decision every morning. You decide what to do with it — the verdicts are advice, not a warranty, and a patch you skip is your call to make.
- Your account is yours. Don't share credentials; do tell us if they leak.
- Paid plans renew until you stop them. Cancel any time; the plan runs to the end of the period you paid for.
- Don't resell the briefs wholesale. Quoting a card with attribution is fine.
- If we change these terms materially, you get notice before the change applies to you.
Privacy
Behavioural data improves relevance. It is never sold and never used for advertising. That is the whole position, and the rest is detail.
Paste a file
Read inside the request. Never written to a database, a log, or analytics.
Public username
We read what anyone can read. No authorisation, no private data.
Connected repositories
Read-only. Disconnect and everything derived is deleted, verifiably, with a receipt.
You can export what we hold, or delete the account outright, from settings. Deletion is not a soft flag — the derived records go with it.
Subprocessors
Four categories of processor, listed by role. Named entities and regions are in the signed data-processing addendum, which we send on request.
- Cloud hosting and storage — European region
- Transactional email delivery
- Payment processing — card data never reaches us
- Model inference for chat and drafting — no training on your data
We give thirty days' notice before adding a subprocessor that touches customer data.
Contact
A person reads every one of these. Security reports get an acknowledgement within one working day.